Windows server 2022 SUG deployment status compliance

Sergi Díaz Ruiz 145

Good morning to all!!

I never deal before with updates deployment and I don't know how to track it.

I have read the following article:

https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/update-management/track-software-update-compliance-assessment

And followed the different steps but... I can't find the KB installed in the machine.

Why SCCM tell me that the KB is not necessary or already installed on the machine?

Why it's in compliance status? How SCCM determine that this pc it's compliance?

How can I demonstrate that's true?

TIA !!

2 answers

AllenLiu-MSFT 44,981 Reputation points Microsoft Vendor

2024-06-28T02:19:42.83+00:00
Hi, @Sergi Díaz Ruiz

Thank you for posting in Microsoft Q&A forum.

About the SUG deployment status, it will show compliant when:

The client doesn't need this update.

The client need this update and installed successfully.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".
Please sign in to rate this answer.
Sergi Díaz Ruiz 145 Reputation points

2024-06-28T07:22:27.4933333+00:00

Hi @AllenLiu-MSFT ,

I really don't agree with you 100%...

This machine only has three 2021 patches.

I try to manually install the KB5039227 patch and it installed successfully. Reboot the machine and we have patches from 2021 + KB5039227 (2024)... So... That compliance status is not correct, it is not true.

Why can I install it manually and this machine is unpatched since 2021?

TIA !

AllenLiu-MSFT 44,981 Reputation points Microsoft Vendor

2024-07-01T02:48:48.39+00:00

Hi, @Sergi Díaz Ruiz

Thank you for the feedback.

The KB5039227 is replaced by KB5041054.

https://www.catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=a5726fe0-24b4-4e42-9369-8cd9b73baad2#PackageDetails

SCCM cannot deploy the replaced updates, it will be considered as not required. And the not required updates will show compliant in the deployment. But these updates can be installed manually.

Sergi Díaz Ruiz 145 Reputation points

2024-07-01T06:11:44.81+00:00

Morning,

Yes I know. Then it's solved, because superseded KB give you compliance status and KB5041054 is not available in SUS:

Then... It's normal? It (KB5041054) doesn't appear in my SCCM.

Regards, and thanks !!

AllenLiu-MSFT 44,981 Reputation points Microsoft Vendor

2024-07-03T06:59:44.6866667+00:00

You are right, the KB5041054 is not available now, I checked my SCCM environment, it doesn't appear in the console too.

But I can deploy the KB5039227 to Windows server 2022 successfully by SCCM.

So, do you deploy the correct version(21H2 or 22H2) to your windows server 2022 by SCCM?

Sergi Díaz Ruiz 145 Reputation points

2024-07-03T12:54:37.8333333+00:00

Thanks a lot for answer.

Yes, my problem is that they appear as compliance when is not true... So... Is this normal when is superseded? Or only appear when we have the KB (KB5041054) published in SCCM?

I don't know if you understand my question... I don't know if I'm explained myself well...

AllenLiu-MSFT 44,981 Reputation points Microsoft Vendor

2024-07-04T02:07:52.9366667+00:00

No, it's not normal, if it is required for the client but not installed, it should not show compliant.

Sergi Díaz Ruiz 145 Reputation points

2024-07-08T11:38:22.2466667+00:00

Sorry for the delay...

Then where is the problem? I can install it manually but not from SCCM because is in compliance status.

Why?

Regards,

AllenLiu-MSFT 44,981 Reputation points Microsoft Vendor

2024-07-09T06:42:09.4966667+00:00

Is this happened for all clients or a specific one?

Sergi Díaz Ruiz 145 Reputation points

2024-07-12T05:43:58.6566667+00:00

Good morning,

Only in a few devices. Not in all. To be honest... I don't check all devices. Just I see the compliance status and say "oh it's ok they are compliance".... So I don't know if the rest devices have this problem.... Maybe I can create a baseline to check it..

Or something else?

AllenLiu-MSFT 44,981 Reputation points Microsoft Vendor

2024-07-16T02:42:13.63+00:00

It is recommended that you contact Microsoft Customer Support Services (CSS) for a dedicated support.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Frank Dong 251 Reputation points

2024-07-12T09:39:55.3066667+00:00

Most of the things are handled by Windows Update agent. It evaluate the windows update manifest file and tells everything.
Please sign in to rate this answer.
Sergi Díaz Ruiz 145 Reputation points

2024-07-15T11:09:51.4266667+00:00

Hi Frank,

So I should red windowsupdate.log? or... Where can I see ?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Windows server 2022 SUG deployment status compliance

2 answers

Your answer